Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: N8r0VEINsHDeHLiOIGFjf9kcrBezyq3L9STFrQ1dqA8=
Subject key identifier: DD:9C:67:F0:E4:54:C8:60:AE:D1:13:5F:A6:BF:B1:23:D9:65:E8:FB
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 01993349A18F6F8744F69CA57E2FA359B733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 11:01:27 +0000
Manifest this update: Wed 10 Sep 2025 11:01:27 +0000
Manifest next update: Thu 11 Sep 2025 11:01:27 +0000
Files and hashes: 1: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: pFcti6HV+ckde4LDqQMHYu2mVjVRPkgMSkwjGld+tXg=)
2: XmJ8vYGbQYVnd8y-h4wRzi3J_pE.roa (hash: exnN1l7i5NuQ19i+bMh7iG0NXDBSnKZN8vpjyWS2vRc=)
3: XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa (hash: aN/R4IVeQqrz28tH9akl71ra6TmpBihdrIjUuL23MYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:a1:8f:6f:87:44:f6:9c:a5:7e:2f:a3:59:b7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Sep 10 11:01:27 2025 GMT
Not After : Sep 11 11:01:27 2025 GMT
Subject: CN=dd9c67f0e454c860aed1135fa6bfb123d965e8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:f9:cd:27:33:bc:aa:37:97:55:c9:ee:71:
a8:b1:74:e1:50:fc:4c:a5:8c:5f:50:24:57:6b:c0:
97:ff:05:ba:f9:81:95:95:34:b3:be:60:9f:f4:b3:
48:86:09:21:49:c2:8c:17:16:dd:b4:21:a5:55:59:
d1:7c:74:3d:20:7f:f4:dd:e9:22:8c:eb:80:06:ce:
ef:b5:4d:42:11:c5:1b:da:05:a4:58:92:cf:30:54:
a2:ea:15:35:9b:1a:73:60:d2:4a:9b:50:95:fd:57:
35:82:46:59:d4:e3:e8:81:0c:a3:c3:29:ac:d1:ab:
05:73:06:b6:06:8d:f0:e6:9f:73:8e:39:70:c5:ed:
5f:90:ef:00:75:38:3f:f1:e0:f4:e1:40:5f:63:cd:
dd:af:a8:50:20:b7:4e:88:e3:95:c3:86:44:c4:9d:
a0:48:df:ce:5a:c7:a8:2c:43:9c:6d:7b:cc:c9:54:
0d:79:9d:fa:9a:d8:a2:38:68:5b:14:8c:e2:01:d3:
e2:74:75:61:e7:16:95:7a:72:6f:ea:c1:52:7c:e1:
e1:84:c4:d4:86:01:72:f3:df:07:f3:7e:8a:26:8d:
8c:4d:20:11:fa:e5:25:52:fa:30:b2:a1:19:31:b0:
74:15:98:1a:50:0c:da:77:0e:8d:bb:bc:71:61:55:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9C:67:F0:E4:54:C8:60:AE:D1:13:5F:A6:BF:B1:23:D9:65:E8:FB
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c3:d5:83:fc:ae:9b:c4:5c:a1:82:7c:9c:8b:57:a8:41:27:
ab:a4:cf:db:b3:f3:87:a7:e6:e7:38:ef:10:b5:08:2e:23:88:
7e:3a:dc:22:4f:02:12:a1:20:91:ae:fb:25:40:d0:ed:e7:92:
d2:ac:2e:d9:9e:5a:32:3f:7c:9a:c6:98:15:f3:b9:de:02:87:
3d:9d:d9:df:ca:f4:ca:e0:ba:6f:8c:a9:15:95:28:05:32:99:
51:10:15:bb:b5:90:ec:f7:88:b0:13:22:fc:cd:d3:d0:e9:ba:
4e:9c:68:f2:3b:0b:29:94:f5:7d:ed:4d:38:f9:50:fb:14:f4:
cb:5c:e5:e7:76:80:fd:e7:cc:a1:45:f5:4a:38:71:c9:45:a9:
c8:f3:82:fe:80:5c:fb:b0:cc:85:e3:ab:d4:fa:93:a1:1c:af:
b2:68:af:0a:6c:08:b8:0e:ce:e5:b3:4e:23:77:08:86:cd:49:
09:b2:62:6f:3b:bf:43:a1:67:29:0c:c1:e5:15:a0:ab:8c:63:
01:b6:79:ff:60:c9:81:58:c3:84:5e:2b:4b:a9:09:37:1f:72:
ca:a1:f1:61:e7:d4:89:f8:80:96:ad:fd:74:80:5a:02:25:c8:
00:5a:a4:f8:4e:67:53:23:7c:5c:d1:67:c0:9d:c0:e1:4f:57:
19:65:e7:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzSaGPb4dE9pylfi+jWbczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYTA2YTQ1M2ZjZDVmMjZmYWY0ODIyYzRiNDU5MDk4ZGNh
ZmYwMzkwHhcNMjUwOTEwMTEwMTI3WhcNMjUwOTExMTEwMTI3WjAzMTEwLwYDVQQD
EyhkZDljNjdmMGU0NTRjODYwYWVkMTEzNWZhNmJmYjEyM2Q5NjVlOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweD5zSczvKo3l1XJ7nGosXThUPxM
pYxfUCRXa8CX/wW6+YGVlTSzvmCf9LNIhgkhScKMFxbdtCGlVVnRfHQ9IH/03eki
jOuABs7vtU1CEcUb2gWkWJLPMFSi6hU1mxpzYNJKm1CV/Vc1gkZZ1OPogQyjwyms
0asFcwa2Bo3w5p9zjjlwxe1fkO8AdTg/8eD04UBfY83dr6hQILdOiOOVw4ZExJ2g
SN/OWseoLEOcbXvMyVQNeZ36mtiiOGhbFIziAdPidHVh5xaVenJv6sFSfOHhhMTU
hgFy898H836KJo2MTSAR+uUlUvowsqEZMbB0FZgaUAzadw6Nu7xxYVW4LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2cZ/DkVMhgrtETX6a/sSPZZej7MB8GA1UdIwQY
MBaAFFCgakU/zV8m+vSCLEtFkJjcr/A5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDkt
ZWY1ZDUwMTFjYTc3LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDktZWY1ZDUwMTFjYTc3
LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsPVg/yu
m8RcoYJ8nItXqEEnq6TP27Pzh6fm5zjvELUILiOIfjrcIk8CEqEgka77JUDQ7eeS
0qwu2Z5aMj98msaYFfO53gKHPZ3Z38r0yuC6b4ypFZUoBTKZURAVu7WQ7PeIsBMi
/M3T0Om6Tpxo8jsLKZT1fe1NOPlQ+xT0y1zl53aA/efMoUX1SjhxyUWpyPOC/oBc
+7DMheOr1PqToRyvsmivCmwIuA7O5bNOI3cIhs1JCbJibzu/Q6FnKQzB5RWgq4xj
AbZ5/2DJgVjDhF4rS6kJNx9yyqHxYefUifiAlq39dIBaAiXIAFqk+E5nUyN8XNFn
wJ3A4U9XGWXnJg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 16:03:11 2025 by rpki-client